User Manual

Chapter 11 Configuring Security Features 51
• A user logs into device server.
• device server collects login information and then checks to see if the
user is in the local database of users.
• If the user is in the local database, device server handles authenti-
cation.
• If the user is not
in the local database, device server submits an
authentication request to the RADIUS server.
• The RADUIS server does one of the following:
— If the user is validated, it passes this information to other devices
and the user is permitted access.
— If the user is not validated, the RADIUS server returns an access
reject message to device server, which then denies access to
the user.
Configuring RADIUS: Web Interface
Use this section for information on configuring device server as a RADIUS
client from the web interface.
1. Access the web interface by entering the device server IP address in a
browser’s URL window.
2. Log on to the device server as root. The default password is dbps.
3. From the main menu, choose Configure > RADUIS.
4. Configure the RADIUS client as required. Use the online help for infor-
mation on configuration fields.
5. When you complete configuration, choose Submit.
Configuring RADIUS: Command Line
To configure device server to function as a RADIUS client, supply a set
radius command that specifies the following:
• run=on
• The IP address of the primary RADIUS server (on the primary field).
The primary server is the first server to which authentication
requests are sent.
• A password (on the secret field)
Note
To use a secondary RADIUS server, supply a second set radius command that specifies run=on,
the IP address of the secondary server (on the secondary field) and another password for the
secondary server (on the secret field).
RADIUS Command Line Configuration Example
set radius run=on primary=199.123.15.129 secret=J9CxegpP